PT-2017-16485

CVE-2017-5402

·

Published

2017-03-07

·

Updated

2025-01-16

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 52 Firefox ESR versions prior to 45.8 Thunderbird versions prior to 52 Thunderbird versions prior to 45.8
Description A use-after-free issue can occur when events are fired for a FontFace object after it has been destroyed, potentially leading to a crash.
Recommendations For Firefox versions prior to 52, update to version 52 or later. For Firefox ESR versions prior to 45.8, update to version 45.8 or later. For Thunderbird versions prior to 52, update to version 52 or later. For Thunderbird versions prior to 45.8, update to version 45.8 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2017-1249
ALT-PU-2017-1322
ALT-PU-2017-1578
CESA-2017_0459
CESA-2017_0461
CESA-2017_0498
DLA-852-1
DLA-896-1
DSA-3805-1
DSA-3832-1
MGASA-2017-0081
MGASA-2017-0082
MGASA-2018-0018
OPENSUSE-SU-2017:0687-1
OPENSUSE-SU-2017:0688-1
OPENSUSE-SU-2017_0690-1
OPENSUSE-SU-2017:1268-1
OPENSUSE-SU-2024:10600-1
OPENSUSE-SU-2024:10601-1
OPENSUSE-SU-2024:14572-1
RHSA-2017:0459
RHSA-2017_0459
RHSA-2017:0461
RHSA-2017_0461
RHSA-2017:0498
RHSA-2017_0498
SUSE-SU-2017:0714-1
SUSE-SU-2017:0732-1
USN-3216-1
USN-3216-2
USN-3233-1
Found an issue in the description? Have something to add? Feel free to write us 👾